How do I keep employee permissions in place when AI connects to business systems?

Make the AI use the same identity and access rules that already apply to the employee or role. Do not give the AI a broad account that can see more than the user. Separate read and write permissions and log actions taken on behalf of users.